Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The SIMCom SIM7600G modem supports an undocumented AT command, which allows an attacker to execute system commands with root permission on the modem. An attacker needs either physical access or remote shell access to a device that interacts directly with the modem via AT commands.

CVE-2025-26412 is a vulnerability identified in the SIMCom SIM7600G modem, specifically in the firmware version LE20B03SIM7600M21-A. The issue stems from the presence of an undocumented AT command that allows an attacker to execute arbitrary system commands with root privileges on the modem itself. AT commands are standard instructions used to control modems, but this particular command is hidden and not documented by the vendor, SIMCom. Exploiting this vulnerability requires either physical access to the device or remote shell access to a device that communicates directly with the modem via AT commands. Once exploited, the attacker gains full control over the modem’s operating system, which can lead to severe consequences including manipulation of modem functionality, interception or modification of communications, or pivoting to other network components. The vulnerability is classified under CWE-912 (Hidden Functionality), indicating that the modem contains a backdoor-like feature that was not intended for public use. The CVSS v3.1 base score is 6.8, reflecting a medium severity level with high impact on confidentiality, integrity, and availability, but limited by the requirement of physical or remote shell access and the attack vector being physical. No known exploits are currently reported in the wild, and no patches have been published yet. This vulnerability highlights the risk of embedded device firmware containing undocumented commands that can be leveraged by attackers to gain privileged access.

Detailed information about CVE-2025-26412: CWE-912 Hidden Functionality in SIMCom SIM7600G Modem affecting SIMCom SIM7600G Modem. Get real-time updates, technic

CVE-2025-26412: CWE-912 Hidden Functionality in SIMCom SIM7600G Modem - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-26412: CWE-912 Hidden Functionality in SIMCom SIM7600G Modem

Threats Tagged 'cve-2025-26412'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-26412'

Lead Pen Test Professional